Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft
File:                     EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft (raw, json)
Hash identifier:          htsWGSH1IGGdA5dWru+7qm7fMWjXSYvuJs2L5QR8IPo=
Subject key identifier:   E0:2D:2E:5A:69:49:5F:03:C7:EF:BC:40:46:28:FC:7D:3F:3F:3E:3B
Authority key identifier: 11:D4:79:12:EF:D4:09:A4:6F:7C:D4:27:41:80:4C:7D:4F:5E:1A:D5
Certificate issuer:       /CN=11d47912efd409a46f7cd42741804c7d4f5e1ad5
Certificate serial:       0198D73B4F9240D6F9249604D43084EAC0D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft
Manifest number:          15DE
Signing time:             Sat 23 Aug 2025 14:00:44 +0000
Manifest this update:     Sat 23 Aug 2025 14:00:44 +0000
Manifest next update:     Sun 24 Aug 2025 14:00:44 +0000
Files and hashes:         1: EdR5Eu_UCaRvfNQnQYBMfU9eGtU.crl (hash: KBwXGseMC+UQMFFEDikMyW5XAPqrhSbujls2RHRXgGg=)
                          2: FTO-WxW7sPayKFxLz7VzC8cq9-I.roa (hash: cBwaO5bj6Q5Qg6BTkhA0mco8iqfNRZ8ycLxM+09RwRE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:3b:4f:92:40:d6:f9:24:96:04:d4:30:84:ea:c0:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11d47912efd409a46f7cd42741804c7d4f5e1ad5
        Validity
            Not Before: Aug 23 14:00:44 2025 GMT
            Not After : Aug 24 14:00:44 2025 GMT
        Subject: CN=e02d2e5a69495f03c7efbc404628fc7d3f3f3e3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:41:cb:0f:6f:5d:bf:ee:f3:43:16:69:9b:71:
                    f7:78:63:4a:0a:7c:08:f0:be:27:b4:fa:a5:60:f8:
                    19:30:2f:ca:ed:c1:6b:8f:cf:2b:1a:82:65:a7:78:
                    59:c5:5c:68:07:bb:c6:3c:5f:03:1d:9b:a4:41:cf:
                    ae:b2:e3:20:17:85:60:32:59:6a:51:63:d8:0d:90:
                    f2:be:67:41:82:d4:9f:61:f3:23:e0:44:c6:48:af:
                    57:07:d9:ec:ef:e0:eb:d5:7d:fc:3f:83:0a:ce:c6:
                    13:c9:bf:f8:bb:47:28:4a:95:73:39:24:81:95:39:
                    07:e8:4c:1f:8d:77:14:23:93:a4:36:de:56:43:5c:
                    d3:04:aa:09:4c:47:fe:bc:e5:70:8d:f8:60:4e:ce:
                    e0:a0:dc:4e:c0:53:8a:2d:1e:05:80:4b:54:3a:d6:
                    8d:40:05:b1:4c:30:ba:de:24:cb:8b:42:06:73:7f:
                    f3:6f:b9:9f:cb:b9:71:0e:77:ae:84:e9:a8:fb:4d:
                    56:8c:47:80:70:6e:ea:b8:f2:78:3f:fc:70:19:f5:
                    58:57:98:ae:77:3c:95:ab:31:af:78:80:26:3b:1c:
                    e8:ab:ad:5e:46:7f:f4:fe:34:e9:e7:eb:62:cb:45:
                    59:97:d3:65:a6:89:6d:17:ce:f4:ba:9c:49:eb:5b:
                    5b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2D:2E:5A:69:49:5F:03:C7:EF:BC:40:46:28:FC:7D:3F:3F:3E:3B
            X509v3 Authority Key Identifier:
                keyid:11:D4:79:12:EF:D4:09:A4:6F:7C:D4:27:41:80:4C:7D:4F:5E:1A:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:0b:95:93:07:68:54:b8:f7:cd:a3:da:15:87:67:d6:db:f5:
         0e:54:a8:cc:b4:50:09:1b:ac:47:e5:94:d5:e6:a1:fa:63:f5:
         70:48:a9:90:e4:3f:6f:01:04:eb:28:3f:6e:51:a6:1d:ac:e4:
         a8:7d:50:0e:e7:4f:5e:ac:0b:0e:f3:b9:94:02:18:30:29:9f:
         b3:bb:33:24:ee:2d:f6:fa:1f:87:fc:94:1f:39:07:29:4c:d0:
         19:aa:60:cb:0a:db:ff:60:e2:82:c7:a8:52:1a:6f:f1:e1:a3:
         83:00:56:42:fc:ac:b3:a3:3a:98:21:e1:91:de:c4:01:64:07:
         a1:00:a7:00:00:db:28:83:93:5b:0d:64:17:29:62:76:1c:62:
         db:f9:43:38:ec:f8:a0:5d:6c:a6:2d:a2:09:a8:26:76:77:5a:
         a7:65:20:ed:67:c7:29:ed:fb:e4:d2:3c:55:b2:1d:fe:cf:54:
         6b:42:af:77:33:d1:50:9c:44:f2:69:0f:b0:28:ad:8f:67:1d:
         71:b5:ee:1d:a6:7a:cc:3b:e6:73:7c:67:bb:66:c4:fe:a5:49:
         00:09:d6:d8:c7:96:ad:27:14:a7:92:1a:db:0e:7c:42:15:cb:
         68:de:f8:63:bf:e6:da:bb:90:91:01:e3:a3:8a:8f:28:0e:fe:
         12:9d:3a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:11:57 2025 by rpki-client